CVE-2023-53774
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: VulnCheck

Description
MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-06-16
AI Q&A
2025-12-09
EPSS Evaluated
2026-06-15
NVD
CVE-2023-53774
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
minidvblinux minidvblinux 5.4
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in MiniDVBLinux 5.4 involves the SVDRP protocol, where remote attackers can send specially crafted commands via the svdrpsend.sh script to manipulate TV systems. This allows attackers to execute commands remotely and potentially take control of the video disk recorder.

Impact Analysis

The vulnerability can allow remote attackers to execute arbitrary commands on the affected system without any authentication, potentially leading to unauthorized control over the video disk recorder and manipulation of TV system functions.

Detection Guidance

This vulnerability can be detected by attempting to send crafted SVDRP commands to the MiniDVBLinux device using the svdrpsend.sh script. For example, you can use a curl command to send a test message to the TV screen to verify if the device is vulnerable: curl http://ip:8008/?site=commands&section=system&command=svdrpsend.sh%20MESG%20TEST_MESSAGE. If the message appears on the TV screen or the connection closes confirming the command was accepted, the system is vulnerable. [1]

Mitigation Strategies

Immediate mitigation steps include restricting network access to the SVDRP service (port 8008) to trusted hosts only, disabling or restricting the svdrpsend.sh script if possible, and monitoring for unauthorized SVDRP commands. Applying any available patches or updates from MiniDVBLinux is recommended once released. Until then, isolating the affected devices from untrusted networks can reduce the risk of exploitation. [1, 2, 3]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53774. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart